CVE-2023-4885 - Multiple vulnerabilities in Open5GS

Back Back to CVE browser

MEDIUM

Multiple vulnerabilities in Open5GS

Published Oct 3, 2023

6.5

MEDIUM

CVSS 3.1

EPSS 0.32%

Description

Man in the Middle vulnerability, which could allow an attacker to intercept VNF (Virtual Network Function) communications resulting in the exposure of sensitive information.

Affected products

Vendor Open5GS Product Open5GS Default
unaffected
- Version
  2.4.10 and prior
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Open5GS

unaffected

Version	Status	Constraints
2.4.10 and prior	affected	-

Remediation

Vendor solution

Open5GS is working on a fix for the reported vulnerabilities.

Weaknesses (1)

CWE-300

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54724
Advisory
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54724		Advisory
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs		Third Party Advisory